VER-EVA-AIA Assume It's Automatable
FedRAMP Consolidated Rules (2026) 2026.07.14.01
All changes in this version
All changes in this version
Title
Assume It's Automatable
Control
Providers MUST assume the exploitation of vulnerabilities can be automated UNLESS they have evidence proving otherwise.